Lists (32)
Sort Name ascending (A-Z)
ALL in ONE Hacking Tools
API Security
BugBounty
CheatSheet
Checklist
CodeReview
Deserialization
DevSecOps
dotnet
FreeCertifications
Guide
HTML-Sanitizer
Java
JavaScript
Mobile Security
nodejsscan
OpenRedirect
OSCP
Payloads
Pentest
Pentest Tools
PentestLabs
PrivilegeEscalation
Reports
SecurityAuditTools
SoftwareCompositionAnalysis
Sql-Injection
VulnerabilityScanner
Web Security
WordListGenerator
XSS
XXE
Stars
Language
Sort by: Recently starred
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
List DTDs and generate XXE payloads using those local DTDs.
Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.
BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more c…
Monitor linux processes without root permissions
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
Top disclosed reports from HackerOne
A fast tool to scan CRLF vulnerability written in Go
The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, …
A simple script just made for self use for bypassing 403
Gospider - Fast web spider written in Go
「🔑」A tool used to hunt down API key leaks in JS files and pages
This repository contains a roadmap for preparing for the EJPT exam.
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter
Small, fast tool for performing reverse DNS lookups en masse.
Bambdas collection for Burp Suite Professional and Community.
Mirror of https://gitlab.com/Remmina/Remmina The GTK+ Remmina Remote Desktop Client
Collection of methodology and test case for various web vulnerabilities.
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
dnsenum is a perl script that enumerates DNS information
My Security Article space on GitHub dedicated to sharing insights, best practices, and discussions related to cybersecurity, ensuring safer code and applications.
A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.